Description
Cross-site request forgery (CSRF) vulnerability in Liferay Portal 7.4.1 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 allows remote attackers to add and edit publication comments.
Remediation
References
Related Vulnerabilities
WordPress Plugin qTranslate X Cross-Site Scripting (3.4.3)
WordPress Plugin Secure File Manager Remote Code Execution (2.8.1)
Oracle JRE CVE-2013-2466 Vulnerability (CVE-2013-2466)
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60199)
Oracle HTTP Server CVE-2021-2315 Vulnerability (CVE-2021-2315)